Assetic for TYPO3 CMS
68%
Total Score
caution
Usable with caveats: regular releases are offset by a single-contributor repository and limited security controls.
Only one registry account has publishing access. Because the repository is owned by an individual rather than an organization, this provides limited publishing redundancy.
One contributor made all 14 commits in the last three months, giving the project a bus factor of one. This creates a meaningful continuity risk if that maintainer becomes unavailable.
The repository has 2 stars, 0 forks, and 1 watcher. Low adoption is supporting evidence rather than a verdict, but it offers little external validation or contributor depth.
Composer build tooling is present, but no security scanning tools were detected. For a maintained application extension, that leaves a preventable oversight gap.
The repository has no security policy. This reduces transparency about how consumers should report vulnerabilities and how security issues are handled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^12.4.6 || ^13.4.0 || ^14.3.0 | — | — |
assetic/framework Version ^3.1.2 | — | — |
cundd/assetic_additions Version ^2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.